Design/Logic Flaw

2023-12-0114:15:00

PRIOn knowledge base

www.prio-n.com

logic flaw

design vulnerability

mib3 infotainment

uds access

can bus

skoda superb iii

2.0 tdi

2022

nvd

6.9 Medium

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

12.9%

JSON

Access to critical Unified Diagnostics Services (UDS) of the Modular Infotainment Platform 3 (MIB3) infotainment is transmitted via Controller Area Network (CAN) bus in a form that can be easily decoded by attackers with physical access to the vehicle.

Vulnerability discovered on Škoda Superb III (3V3) - 2.0 TDI manufactured in 2022.

CPENameOperatorVersion
mib3_firmwarele0304

CPE	Name	Operator	Version
	mib3_firmware	le	0304

References

asrg.io/security-advisories/cve-2023-28896/